Privacy policy

Last updated: 2 July 2026

This policy explains what personal data jobespy collects, why we collect it, how we use and protect it, and the rights you have over it. We have written it to be read, not to hide behind legal language.

jobespy is a product of Beoned Ltd. In this policy, “jobespy”, “we”, “us” and “our” mean Beoned Ltd.

Who we are

Beoned Ltd is the data controller for the personal data described in this policy.

Registered office: 124 City Road, London, EC1V 2NX, United Kingdom.

We are registered with the UK Information Commissioner’s Office (ICO).

For any privacy question, contact us at privacy@jobespy.com. To reach our data protection point of contact directly, email dpo@jobespy.com.

The data we collect

We collect only what we need to run the service.

Account data. When you create an account we collect your name, email address, and a password (stored only as a secure hash, never in plain text).

Job-search content you create. jobespy is a tool for running a job search, so it holds the information you put into it: the roles you are pursuing, the companies and contacts you track, your notes, your plan, and the documents you upload or create such as a CV or cover letter. This content is yours.

Connected mail account data. If you choose to connect a Gmail or Microsoft account to send outreach, we store an access token for that account, encrypted at rest. We request send-only permission. We do not read your inbox, and we never request a read permission for your mail.

Usage and technical data. We collect basic information needed to operate and secure the service, such as log data, device and browser type, and the actions you take in the app. Where we use analytics, it is to understand how the product is used so we can improve it.

Payment data. If you subscribe, payment is handled by our payment provider. We do not store your full card details on our systems; we hold a record that a subscription exists and its status.

How we use your data

We use your data to:

• Provide the service: run your account, store your job-search content, and let you use the features.
• Send outreach you have explicitly chosen to send, through a mail account you have connected. No message is ever sent without your direct, in-the-moment confirmation showing exactly what will be sent and to whom.
• Operate AI features. When you ask jobespy to help tailor a CV, draft a message, or similar, the relevant content is processed by our AI provider to produce that output. The output is yours to use or discard; nothing is sent on your behalf without your direct confirmation (see above).
• Keep the service secure, prevent abuse, and fix problems.
• Communicate with you about your account and, if you have opted in, send our newsletter. You can unsubscribe at any time.
• Meet our legal obligations.

Our legal bases

Under UK GDPR we rely on:

• Contract: to provide the service you have signed up for.
• Legitimate interests: to secure, maintain and improve the product, where this does not override your rights.
• Consent: for the newsletter and any non-essential cookies. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or disclose certain records.

AI processing

Jobespy uses AI features to help you with tasks such as tailoring a CV to a job description, drafting outreach, and running sessions with the Espy chat assistant.

When you use the Espy chat assistant, your messages and relevant structured data from your jobespy account (such as opportunity details, contact notes, and your plan) are sent to our AI provider, OpenAI, to generate a response. We do not send raw uploaded file content or email bodies to OpenAI beyond what you explicitly paste or upload into the chat.

OpenAI’s API terms confirm that data submitted via the API is not used to train or improve OpenAI’s models. We use the OpenAI API only; we do not use any consumer-facing OpenAI products with your data, and we have not opted in to any data-sharing programme. We verified this position against the OpenAI API Usage Policies on 2 July 2026 and will re-verify it at each major terms update.

You may paste information about third parties (such as recruiters, hiring managers, or companies) into Espy. You are responsible for having a lawful basis for sharing that information with us. We process it only to provide the jobespy service to you and share it only with OpenAI for the purpose of generating your response.

Your Espy conversation history is stored for up to 12 months from the date of the last message. You can delete individual conversations at any time from within the app. Closing your account permanently removes all conversation data immediately.

We process your data for AI features on the lawful basis of contract performance: it is part of the service you signed up for. Where an AI feature is optional and you choose to use it, we rely on your consent, which you can withdraw at any time.

For a plain-English summary of how we handle your data, see our trust and privacy page.

Sharing your data

We do not sell your personal data. We share it only with:

• Service providers who help us run jobespy (for example hosting, database, email delivery, the AI provider, and our payment provider), acting on our instructions under appropriate agreements.
• Mail providers you connect, to send the messages you choose to send.
• Authorities, where we are legally required to do so.

Some of these providers may process data outside the UK. Where that happens, we rely on appropriate safeguards such as UK-approved transfer mechanisms.

How long we keep it

We keep your account and job-search content for as long as your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must keep certain records to meet a legal obligation. You can ask us to delete your data at any time. Espy conversation history is subject to a shorter retention period; see the AI processing section above for details.

Security

We protect your data with measures appropriate to its sensitivity. Connected mail tokens and stored credentials are encrypted at rest and decrypted only at the point of use. Access to user data is restricted, and each account can only see its own data. No system is perfectly secure, but we take this seriously and design for it.

Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete your data (“right to be forgotten”), subject to legal limits.
• Restrict or object to certain processing.
• Data portability, to receive your data in a usable format.
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, email privacy@jobespy.com. We will respond within the time the law allows. You also have the right to complain to the ICO at ico.org.uk, though we would appreciate the chance to resolve your concern first.

Children

jobespy is not intended for anyone under 16, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy as the product changes. When we make a material change, we will update the date above and, where appropriate, tell you directly.

Contact

Beoned Ltd, 124 City Road, London, EC1V 2NX.

Privacy enquiries: privacy@jobespy.com. Data protection point of contact: dpo@jobespy.com.